Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138322e302f32332d3234203d3e203631333137.roa
File:                     3138352e3231352e3138322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          cXOx6kpgTJ8D6eQh5eLhIuTL4FbgF9Maq+1bbV8bfkI=
Subject key identifier:   E2:D1:CF:30:28:F1:41:B3:61:9A:C8:E4:95:50:12:B3:87:51:AA:E8
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       12FF73A50090D7F65698ACF39ABDF9706AA364A3
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138322e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:36 +0000
ROA not before:           Sat 22 Oct 2022 04:29:36 +0000
ROA not after:            Sat 21 Oct 2023 04:34:36 +0000
asID:                     61317
IP address blocks:        185.215.182.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ff:73:a5:00:90:d7:f6:56:98:ac:f3:9a:bd:f9:70:6a:a3:64:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:36 2022 GMT
            Not After : Oct 21 04:34:36 2023 GMT
        Subject: CN=E2D1CF3028F141B3619AC8E4955012B38751AAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:e5:c1:60:43:ed:39:f9:0e:4a:7d:92:1a:
                    3a:a4:3d:f7:63:69:67:81:1e:bf:07:e0:e6:ec:49:
                    f0:73:60:cb:e7:53:3d:51:7b:1d:b2:e4:90:83:d3:
                    50:18:02:a2:47:c2:36:b3:ba:c4:93:20:e2:77:98:
                    ea:06:7e:41:74:2b:f4:01:4c:4e:12:98:54:29:ff:
                    1b:06:76:8f:61:02:20:a9:da:65:76:10:4d:5e:b2:
                    37:12:a6:e5:54:17:53:da:cf:ce:c3:7f:33:02:98:
                    08:c7:6b:40:6a:f9:22:3c:43:4a:b9:b4:07:cf:95:
                    31:2f:1b:1d:78:59:08:24:53:59:18:e4:55:f9:de:
                    79:ff:a4:5b:db:ac:a1:79:aa:4b:7e:4c:15:e8:72:
                    38:5f:97:25:26:3c:4b:9d:01:7d:59:41:d7:19:0c:
                    f1:4c:0f:37:4c:06:89:53:1e:f7:84:a5:f1:97:9a:
                    e1:5d:ff:32:12:64:c7:c9:69:e5:72:b2:1d:bd:49:
                    47:26:fe:42:fa:26:4d:96:96:c0:2a:8f:e0:0a:90:
                    9b:2d:1a:f5:fa:ed:fe:0a:82:95:41:b4:1e:3a:37:
                    ee:42:bf:3a:6b:62:24:43:c3:0f:dc:80:63:df:a1:
                    87:15:39:ea:70:2d:b0:2a:2e:ce:07:d9:7b:86:89:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D1:CF:30:28:F1:41:B3:61:9A:C8:E4:95:50:12:B3:87:51:AA:E8
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3138322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:09:04:de:ff:bd:72:32:9c:10:07:9f:0f:54:f6:7f:81:
         dd:14:4a:e2:1f:f6:e5:3d:20:4a:a9:72:3f:6e:b0:8a:7d:c9:
         da:64:6f:94:2e:82:3d:b0:5c:76:e9:cd:37:d4:58:e8:33:4e:
         4a:e8:2d:33:77:2f:e0:8a:44:e6:34:ab:de:a7:5f:cf:da:44:
         83:2d:46:dc:6f:74:d5:a8:21:32:8f:f6:1b:14:e8:db:93:0f:
         f8:c0:20:aa:e1:ae:8e:34:5a:de:6d:bf:5a:b8:2e:97:fe:22:
         8f:40:81:ca:33:4c:c9:3f:10:64:25:e3:5a:de:87:7f:78:53:
         be:75:79:a8:09:00:09:27:56:23:9d:b1:dd:58:4f:66:2f:cd:
         49:02:43:7a:53:bb:05:22:ed:3c:5d:dc:35:ba:18:d0:74:c8:
         9b:51:be:cc:5a:2e:8d:3d:a7:2e:67:d2:6b:f4:7a:68:ab:5e:
         43:75:84:f6:a6:f6:01:b0:ce:56:6b:80:6e:d3:13:17:b2:8f:
         de:90:f2:f9:36:64:92:8e:a1:19:d9:3e:db:80:25:e7:8c:15:
         c6:7a:e0:0a:b2:8d:a4:81:77:99:1b:4d:05:3a:a3:09:c8:f3:
         5a:a1:aa:4b:ae:fd:e2:58:9a:38:78:68:12:77:f0:11:55:ec:
         c0:7a:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-fra.rpki-client.org